If changes are prioritised incorrectly, unimportant patches could be installed first, for example. Important patches could then be installed too late and allow vulnerabilities to remain open for longer. Patch and change management is often supported by software-based tools. These tools may also contain software errors and therefore provide insufficient or incorrect information on a change. If the change information provided by a tool of this kind is not verified and checked for plausibility, the actual implementation of changes may differ from an organisation's assumptions.